But my question is this: why should passwords be encrypted if they are being stored in a secure database? I realize that if someone hacks in to my database they will get everyone's password.